Description
sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenBSD | OpenBSD | — | — |
Advisories 1
- WID-SEC-2026-1984 OpenBSD: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jun 16, 2026